Input validation vulnerability in WP Customize Login 1.1

The WP Customize Login plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This attack can be done if the version of the plugin is 1.1 or lower. An attacker who has access to the WordPress website can inject malicious code into the website, which will run whenever anyone visits the website. This malicious code can be used to steal information or do damage. To protect against this type of attack, make sure you update the plugin to the latest version.